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Allowance 

Claims 31, 33-35, 38-61, 63-65, and 68-91 are allowed. 

The following is an examiner's statement of reasons for allowance: The closest 
prior art teaches intrusion detection systems including IDS modules, intrusion analysis 
systems, and transparent forwarding to or communication with remote entities such that 
an attacker believes to be successfully attacking the system while is actually in 
communication with law enforcement or the like, gathering additional information about 
the attack and/or attacker. What the cited prior art (Comay, Pearson, Boebert, and 
Lyle) lacks is the distinct separation and handling of external intrusions into the network 
versus internal intrusions within the network by different intrusion detection systems. 

Upon further search, Kouznetsov (U.S. Patent 6,725,377) was found to disclose 
separate monitoring servers for internal versus external intrusions (Column 1 1 , lines 11- 
24). However, no legitimate combination of the references would teach all of the 
limitations Applicant's independent claims (31 and 61), such that one intrusion detection 
system will detect intrusions within the network while another detects intrusions into the 
network, forwarding information regarding such an intrusion to an analysis module, and 
performing distinct actions by the analysis module dependent upon whether the 
intrusion attempt was internal (within) or external (into) to the network. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JEFFREY D. POPHAM whose telephone number is 
(571)272-7215. The examiner can normally be reached on M-F 9:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571)272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Jeffrey D Popham 

Examiner 
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